Forum Search:
Forum.Brain-Cluster.com: Brain Cluster Technical Forum
Ultimate forum for Technical Discussions

Home » Microsoft » Windows Server » Active Directory » OU and GPO delegation
OU and GPO delegation [message #161952] Sun, 11 October 2009 02:58 Go to next message
aconti  is currently offline aconti  United States
Messages: 113
Registered: August 2009
Senior Member
Hello can you just confirm that these 2 different delegations are not
relative to each other and for instance I can have an Organizational
Unit with a GPO linked and have 2 different Administrators one with
delegation permissions for the Organizational Unit and the other admin
for the GPO.

Also what does the create/delete all child objects in the GPO security
permissions mean and how it differentiates itself from the same
create/delete all child objects in the Organizational Unit permission.

Thank you


--
aconti
------------------------------------------------------------ ------------
aconti's Profile: http://forums.techarena.in/members/73272.htm
View this thread: http://forums.techarena.in/active-directory/1257270.htm

http://forums.techarena.in
Re: OU and GPO delegation [message #161953 is a reply to message #161952] Sun, 11 October 2009 05:21 Go to previous messageGo to next message
florian  is currently offline florian  Germany
Messages: 484
Registered: July 2009
Senior Member
Howdie!

aconti schrieb:
> Hello can you just confirm that these 2 different delegations are not
> relative to each other and for instance I can have an Organizational
> Unit with a GPO linked and have 2 different Administrators one with
> delegation permissions for the Organizational Unit and the other admin
> for the GPO.

It all boils down to one security model. Depending on what ACEs there
are (permissions defined on the OU), people can link Group Policies to
it and/or create child objects (create users, computers, ...) in that OU.

Delegation of the right permissions allows people to both administer the
OU and create GPs on it.

Cheers,
Florian
--
Microsoft MVP - Group Policy
eMail: prename [at] frickelsoft [dot] net.
blog: http://www.frickelsoft.net/blog.
Maillist (german): http://frickelsoft.net/cms/index.php?page=mailingliste
Re: OU and GPO delegation [message #161954 is a reply to message #161952] Sun, 11 October 2009 05:43 Go to previous messageGo to next message
Marcin  is currently offline Marcin  United States
Messages: 273
Registered: July 2009
Senior Member
If you are referring to GPO permissions (which you can assign via GPMC on
per-GPO level) - then they apply specifically to the GPO AD object - not an
AD container that the GPO is linked to...

hth
Marcin

"aconti" <aconti.3zvxnc@DoNotSpam.com> wrote in message
news:aconti.3zvxnc@DoNotSpam.com...
>
> Hello can you just confirm that these 2 different delegations are not
> relative to each other and for instance I can have an Organizational
> Unit with a GPO linked and have 2 different Administrators one with
> delegation permissions for the Organizational Unit and the other admin
> for the GPO.
>
> Also what does the create/delete all child objects in the GPO security
> permissions mean and how it differentiates itself from the same
> create/delete all child objects in the Organizational Unit permission.
>
> Thank you
>
>
> --
> aconti
> ------------------------------------------------------------ ------------
> aconti's Profile: http://forums.techarena.in/members/73272.htm
> View this thread: http://forums.techarena.in/active-directory/1257270.htm
>
> http://forums.techarena.in
>
Re: OU and GPO delegation [message #161955 is a reply to message #161952] Sun, 11 October 2009 05:34 Go to previous messageGo to next message
aconti  is currently offline aconti  United States
Messages: 113
Registered: August 2009
Senior Member
to add with it, which permissions I have to tick in the Organizational
Unit delegation to permit a particular user or group to link GPO' s to
the delegated OU


--
aconti
------------------------------------------------------------ ------------
aconti's Profile: http://forums.techarena.in/members/73272.htm
View this thread: http://forums.techarena.in/active-directory/1257270.htm

http://forums.techarena.in
Re: OU and GPO delegation [message #161969 is a reply to message #161954] Mon, 12 October 2009 05:10 Go to previous message
Jorge Silva  is currently offline Jorge Silva
Messages: 398
Registered: July 2009
Senior Member
Hi
I agree with Marcin on this, in this scenario you may need to delegate per
GPO object.

--
I hope that the information above helps you.
Have a Nice day.
Jorge Silva
MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.



"Marcin" <marcin@community.nospam> wrote in message
news:uZzGvgmSKHA.1236@TK2MSFTNGP05.phx.gbl...
> If you are referring to GPO permissions (which you can assign via GPMC on
> per-GPO level) - then they apply specifically to the GPO AD object - not
> an AD container that the GPO is linked to...
>
> hth
> Marcin
>
> "aconti" <aconti.3zvxnc@DoNotSpam.com> wrote in message
> news:aconti.3zvxnc@DoNotSpam.com...
>>
>> Hello can you just confirm that these 2 different delegations are not
>> relative to each other and for instance I can have an Organizational
>> Unit with a GPO linked and have 2 different Administrators one with
>> delegation permissions for the Organizational Unit and the other admin
>> for the GPO.
>>
>> Also what does the create/delete all child objects in the GPO security
>> permissions mean and how it differentiates itself from the same
>> create/delete all child objects in the Organizational Unit permission.
>>
>> Thank you
>>
>>
>> --
>> aconti
>> ------------------------------------------------------------ ------------
>> aconti's Profile: http://forums.techarena.in/members/73272.htm
>> View this thread: http://forums.techarena.in/active-directory/1257270.htm
>>
>> http://forums.techarena.in
>>
>
>
Previous Topic:IE Group Policy
Next Topic:difference between Assign and Publish a software
Goto Forum:
  


Current Time: Wed Jan 17 04:15:22 MST 2018

Total time taken to generate the page: 0.04888 seconds
.:: Contact :: Home ::Sitemap::.

Powered by: FUDforum 3.0.0RC2.
Copyright ©2001-2009 FUDforum Bulletin Board Software